Taking the complexity out of compliance frameworks